dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Database class integration.

This commit is contained in:
Nate 2019-07-04 15:57:04 -06:00
parent f13a28b43c
commit 47106e5baa
8 changed files with 377 additions and 452 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

68
app/conference_centers/conference_center_delete.php
View File

@ -29,10 +29,7 @@
require_once "resources/check_auth.php"; require_once "resources/check_auth.php";
//check permissions //check permissions
if (permission_exists('conference_center_delete')) { if (!permission_exists('conference_center_delete')) {
//access granted
}
else {
echo "access denied"; echo "access denied";
exit; exit;
} }
@ -41,50 +38,43 @@
$language = new text; $language = new text;
$text = $language->get(); $text = $language->get();
//get the id //delete the data
if (isset($_GET["id"]) && is_uuid($_GET["id"])) { if (is_uuid($_GET["id"])) {
$id = $_GET["id"];
}
//get the domain_uuid $conference_center_uuid = $_GET["id"];
$domain_uuid = null;
if (isset($_SESSION['domain_uuid']) && is_uuid($_SESSION['domain_uuid'])) {
$domain_uuid = $_SESSION['domain_uuid'];
}
//delete the data
if (isset($id) && is_uuid($id)) {
//get the dialplan uuid //get the dialplan uuid
$sql = "select dialplan_uuid from v_conference_centers "; $sql = "select dialplan_uuid from v_conference_centers ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and conference_center_uuid = :conference_center_uuid "; $sql .= "and conference_center_uuid = :conference_center_uuid ";
$parameters['domain_uuid'] = $domain_uuid; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['conference_center_uuid'] = $id; $parameters['conference_center_uuid'] = $conference_center_uuid;
$database = new database; $database = new database;
$dialplan_uuid = $database->select($sql, $parameters, 'column'); $dialplan_uuid = $database->select($sql, $parameters, 'column');
unset ($parameters); unset($sql, $parameters);
//delete the conference center //delete the conference center
$sql = "delete from v_conference_centers "; $array['conference_centers'][0]['conference_center_uuid'] = $conference_center_uuid;
$sql .= "where domain_uuid = '$domain_uuid' "; $array['conference_centers'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "and conference_center_uuid = '$id' ";
$prep_statement = $db->prepare(check_sql($sql));
$prep_statement->execute();
unset($sql);
//delete the dialplan entry
$sql = "delete from v_dialplans ";
$sql .= "where domain_uuid = '$domain_uuid' ";
$sql .= "and dialplan_uuid = '$dialplan_uuid' ";
$db->query($sql);
unset($sql);
//delete the dialplan details //delete the dialplan details
$sql = "delete from v_dialplan_details "; $array['dialplan_details'][0]['dialplan_uuid'] = $dialplan_uuid;
$sql .= "where domain_uuid = '$domain_uuid' "; $array['dialplan_details'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "and dialplan_uuid = '$dialplan_uuid' "; //delete the dialplan entry
$db->query($sql); $array['dialplans'][0]['dialplan_uuid'] = $dialplan_uuid;
unset($sql); $array['dialplans'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$p = new permissions;
$p->add('dialplan_detail_delete', 'temp');
$p->add('dialplan_delete', 'temp');
$database = new database;
$database->app_name = 'conference_centers';
$database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$database->delete($array);
unset($array);
$p->delete('dialplan_detail_delete', 'temp');
$p->delete('dialplan_delete', 'temp');
//clear the cache //clear the cache
$cache = new cache; $cache = new cache;
@ -95,10 +85,12 @@
//apply settings reminder //apply settings reminder
$_SESSION["reload_xml"] = true; $_SESSION["reload_xml"] = true;
//set message
message::add($text['message-delete']);
} }
//redirect the browser //redirect the browser
message::add($text['message-delete']);
header("Location: conference_centers.php"); header("Location: conference_centers.php");
return; return;

43
app/conference_centers/conference_center_edit.php
View File

@ -43,7 +43,7 @@
$text = $language->get(); $text = $language->get();
//action add or update //action add or update
if (isset($_REQUEST["id"])) { if (is_uuid($_REQUEST["id"])) {
$action = "update"; $action = "update";
$conference_center_uuid = $_REQUEST["id"]; $conference_center_uuid = $_REQUEST["id"];
} }
@ -51,25 +51,18 @@
$action = "add"; $action = "add";
} }
//get http post variables and set them to php variables
if (is_array($_POST)) {
$conference_center_uuid = $_POST["conference_center_uuid"];
$dialplan_uuid = $_POST["dialplan_uuid"];
$conference_center_name = $_POST["conference_center_name"];
$conference_center_extension = $_POST["conference_center_extension"];
$conference_center_greeting = $_POST["conference_center_greeting"];
$conference_center_pin_length = $_POST["conference_center_pin_length"];
$conference_center_enabled = $_POST["conference_center_enabled"];
$conference_center_description = $_POST["conference_center_description"];
}
//process the user data and save it to the database //process the user data and save it to the database
if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) { if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
//get the uuid from the POST //get http post variables and set them to php variables
if ($action == "update") { $conference_center_uuid = $_POST["conference_center_uuid"];
$conference_center_uuid = $_POST["conference_center_uuid"]; $dialplan_uuid = $_POST["dialplan_uuid"];
} $conference_center_name = $_POST["conference_center_name"];
$conference_center_extension = $_POST["conference_center_extension"];
$conference_center_greeting = $_POST["conference_center_greeting"];
$conference_center_pin_length = $_POST["conference_center_pin_length"];
$conference_center_enabled = $_POST["conference_center_enabled"];
$conference_center_description = $_POST["conference_center_description"];
//check for all required data //check for all required data
$msg = ''; $msg = '';
@ -97,13 +90,13 @@
$_POST["domain_uuid"] = $_SESSION["domain_uuid"]; $_POST["domain_uuid"] = $_SESSION["domain_uuid"];
//add the conference_center_uuid //add the conference_center_uuid
if (!isset($_POST["conference_center_uuid"])) { if (!is_uuid($_POST["conference_center_uuid"])) {
$conference_center_uuid = uuid(); $conference_center_uuid = uuid();
$_POST["conference_center_uuid"] = $conference_center_uuid; $_POST["conference_center_uuid"] = $conference_center_uuid;
} }
//add the dialplan_uuid //add the dialplan_uuid
if (!isset($_POST["dialplan_uuid"])) { if (!is_uuid($_POST["dialplan_uuid"])) {
$dialplan_uuid = uuid(); $dialplan_uuid = uuid();
$_POST["dialplan_uuid"] = $dialplan_uuid; $_POST["dialplan_uuid"] = $dialplan_uuid;
} }
@ -150,6 +143,7 @@
$database->app_uuid = "b81412e8-7253-91f4-e48e-42fc2c9a38d9"; $database->app_uuid = "b81412e8-7253-91f4-e48e-42fc2c9a38d9";
$database->save($array); $database->save($array);
$message = $database->message; $message = $database->message;
unset($array);
//remove the temporary permission //remove the temporary permission
$p->delete("dialplan_add", "temp"); $p->delete("dialplan_add", "temp");
@ -193,8 +187,8 @@
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['conference_center_uuid'] = $conference_center_uuid; $parameters['conference_center_uuid'] = $conference_center_uuid;
$database = new database; $database = new database;
$result = $database->select($sql, $parameters, 'all'); $row = $database->select($sql, $parameters, 'row');
foreach ($result as &$row) { if (is_array($row) && sizeof($row) != 0) {
$conference_center_uuid = $row["conference_center_uuid"]; $conference_center_uuid = $row["conference_center_uuid"];
$dialplan_uuid = $row["dialplan_uuid"]; $dialplan_uuid = $row["dialplan_uuid"];
$conference_center_name = $row["conference_center_name"]; $conference_center_name = $row["conference_center_name"];
@ -204,7 +198,7 @@
$conference_center_enabled = $row["conference_center_enabled"]; $conference_center_enabled = $row["conference_center_enabled"];
$conference_center_description = $row["conference_center_description"]; $conference_center_description = $row["conference_center_description"];
} }
unset ($parameters); unset($sql, $parameters, $row);
} }
//set defaults //set defaults
@ -218,6 +212,7 @@
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$database = new database; $database = new database;
$recordings = $database->select($sql, $parameters, 'all'); $recordings = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//get the phrases //get the phrases
$sql = "select * from v_phrases "; $sql = "select * from v_phrases ";
@ -225,15 +220,17 @@
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$database = new database; $database = new database;
$phrases = $database->select($sql, $parameters, 'all'); $phrases = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//get the streams //get the streams
$sql = "select * from v_streams "; $sql = "select * from v_streams ";
$sql .= "where (domain_uuid = '".$_SESSION["domain_uuid"]."' or domain_uuid is null) "; $sql .= "where (domain_uuid = :domain_uuid or domain_uuid is null) ";
$sql .= "and stream_enabled = 'true' "; $sql .= "and stream_enabled = 'true' ";
$sql .= "order by stream_name asc "; $sql .= "order by stream_name asc ";
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$database = new database; $database = new database;
$streams = $database->select($sql, $parameters, 'all'); $streams = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//show the header //show the header
require_once "resources/header.php"; require_once "resources/header.php";

33
app/conference_centers/conference_centers.php
View File

@ -46,23 +46,8 @@
$order_by = $_GET["order_by"]; $order_by = $_GET["order_by"];
$order = $_GET["order"]; $order = $_GET["order"];
//validate order by
if (strlen($order_by) > 0) {
$order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', $order_by);
}
//validate the order
switch ($order) {
case 'asc':
break;
case 'desc':
break;
default:
$order = '';
}
//add the search term //add the search term
$search = strtolower(check_str($_GET["search"])); $search = strtolower($_GET["search"]);
if (strlen($search) > 0) { if (strlen($search) > 0) {
$sql_search = "and ( "; $sql_search = "and ( ";
$sql_search .= "lower(conference_center_name) like :search "; $sql_search .= "lower(conference_center_name) like :search ";
@ -70,6 +55,7 @@
$sql_search .= "or lower(conference_center_greeting) like :search "; $sql_search .= "or lower(conference_center_greeting) like :search ";
$sql_search .= "or lower(conference_center_description) like :search "; $sql_search .= "or lower(conference_center_description) like :search ";
$sql_search .= ") "; $sql_search .= ") ";
$parameters['search'] = '%'.$search.'%';
} }
//additional includes //additional includes
@ -77,15 +63,13 @@
require_once "resources/paging.php"; require_once "resources/paging.php";
//prepare to page the results //prepare to page the results
$sql = "select count(conference_center_uuid) as num_rows from v_conference_centers "; $sql = "select count(conference_center_uuid) from v_conference_centers ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= $sql_search; $sql .= $sql_search;
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
if (strlen($search) > 0) {
$parameters['search'] = '%'.$search.'%';
}
$database = new database; $database = new database;
$num_rows = $database->select($sql, $parameters, 'column'); $num_rows = $database->select($sql, $parameters, 'column');
unset($sql);
//prepare to page the results //prepare to page the results
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50; $rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
@ -99,12 +83,11 @@
$sql = "select * from v_conference_centers "; $sql = "select * from v_conference_centers ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= $sql_search; $sql .= $sql_search;
if (strlen($order_by)> 0) { $sql .= "order by $order_by $order "; } $sql .= order_by($order_by, $order);
$sql .= "limit :rows_per_page offset :offset "; $sql .= limit_offset($rows_per_page, $offset);
$database = new database; $database = new database;
$parameters['rows_per_page'] = $rows_per_page;
$parameters['offset'] = $offset;
$result = $database->select($sql, $parameters, 'all'); $result = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//alternate the row style //alternate the row style
$c = 0; $c = 0;
@ -151,7 +134,7 @@
echo "</td>\n"; echo "</td>\n";
echo "<tr>\n"; echo "<tr>\n";
if (is_array($result)) { if (is_array($result) && sizeof($result) != 0) {
foreach($result as $row) { foreach($result as $row) {
if (permission_exists('conference_center_edit')) { if (permission_exists('conference_center_edit')) {
$tr_link = "href='conference_center_edit.php?id=".$row['conference_center_uuid']."'"; $tr_link = "href='conference_center_edit.php?id=".$row['conference_center_uuid']."'";

81
app/conference_centers/conference_room_delete.php
View File

@ -42,59 +42,50 @@
$language = new text; $language = new text;
$text = $language->get(); $text = $language->get();
//get the id
if (isset($_GET["id"]) && is_uuid($_GET["id"])) {
$id = $_GET["id"];
}
//get the domain_uuid
$domain_uuid = null;
if (isset($_SESSION['domain_uuid']) && is_uuid($_SESSION['domain_uuid'])) {
$domain_uuid = $_SESSION['domain_uuid'];
}
//delete the data //delete the data
if (isset($id) && is_uuid($id)) { if (is_uuid($_GET["id"])) {
$conference_room_uuid = $_GET["id"];
//get the meeting_uuid //get the meeting_uuid
if (["persistformvar"] != "true") { $sql = "select meeting_uuid from v_conference_rooms ";
$sql = "select * from v_conference_rooms "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "and conference_room_uuid = :conference_room_uuid ";
$sql .= "and conference_room_uuid = :conference_room_uuid "; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['domain_uuid'] = $domain_uuid; $parameters['conference_room_uuid'] = $conference_room_uuid;
$parameters['conference_room_uuid'] = $id; $database = new database;
$database = new database; $meeting_uuid = $database->select($sql, $parameters, 'column');
$meeting_uuid = $database->select($sql, $parameters, 'column'); unset($sql, $parameters);
unset ($parameters);
}
//echo "meeting_uuid: ".$meeting_uuid."<br />\n";
//delete the conference session //delete conference session
$sql = "delete from v_conference_rooms "; $array['conference_rooms'][0]['conference_room_uuid'] = $conference_room_uuid;
$sql .= "where domain_uuid = '$domain_uuid' "; $array['conference_rooms'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "and conference_room_uuid = '$id'; "; //delete meeting users
//echo $sql."<br />\n"; $array['meeting_users'][0]['meeting_uuid'] = $meeting_uuid;
$db->exec(check_sql($sql)); $array['meeting_users'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
unset($sql); //delete meeting
$array['meetings'][0]['meeting_uuid'] = $meeting_uuid;
$array['meetings'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
//delete the meeting users $p = new permissions;
$sql = "delete from v_meeting_users "; $p->add('meeting_user_delete', 'temp');
$sql .= "where domain_uuid = '$domain_uuid' "; $p->add('meeting_delete', 'temp');
$sql .= "and meeting_uuid = '$meeting_uuid'; ";
//echo $sql."<br />\n"; $database = new database;
$db->exec(check_sql($sql)); $database->app_name = 'conference_centers';
unset($sql); $database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$database->delete($array);
unset($array);
$p->delete('meeting_user_delete', 'temp');
$p->delete('meeting_delete', 'temp');
//set message
message::add($text['message-delete']);
//delete the meetings
$sql = "delete from v_meetings ";
$sql .= "where domain_uuid = '$domain_uuid' ";
$sql .= "and meeting_uuid = '$meeting_uuid'; ";
//echo $sql."<br />\n";
$db->exec(check_sql($sql));
unset($sql);
} }
//redirect the user //redirect the user
message::add($text['message-delete']);
header("Location: conference_rooms.php"); header("Location: conference_rooms.php");
return; return;

498
app/conference_centers/conference_room_edit.php
View File

@ -44,9 +44,9 @@
$text = $language->get(); $text = $language->get();
//action add or update //action add or update
if (isset($_REQUEST["id"])) { if (is_uuid($_REQUEST["id"])) {
$action = "update"; $action = "update";
$conference_room_uuid = check_str($_REQUEST["id"]); $conference_room_uuid = $_REQUEST["id"];
} }
else { else {
$action = "add"; $action = "add";
@ -54,25 +54,25 @@
//get http post variables and set them to php variables //get http post variables and set them to php variables
if (count($_POST) > 0) { if (count($_POST) > 0) {
$conference_center_uuid = check_str($_POST["conference_center_uuid"]); $conference_center_uuid = $_POST["conference_center_uuid"];
$meeting_uuid = check_str($_POST["meeting_uuid"]); $meeting_uuid = $_POST["meeting_uuid"];
$conference_room_name = check_str($_POST['conference_room_name']); $conference_room_name = $_POST['conference_room_name'];
$moderator_pin = check_str($_POST["moderator_pin"]); $moderator_pin = $_POST["moderator_pin"];
$participant_pin = check_str($_POST["participant_pin"]); $participant_pin = $_POST["participant_pin"];
$profile = check_str($_POST["profile"]); $profile = $_POST["profile"];
$record = check_str($_POST["record"]); $record = $_POST["record"];
$user_uuid = check_str($_POST["user_uuid"]); $user_uuid = $_POST["user_uuid"];
$max_members = check_str($_POST["max_members"]); $max_members = $_POST["max_members"];
$start_datetime = check_str($_POST["start_datetime"]); $start_datetime = $_POST["start_datetime"];
$stop_datetime = check_str($_POST["stop_datetime"]); $stop_datetime = $_POST["stop_datetime"];
$wait_mod = check_str($_POST["wait_mod"]); $wait_mod = $_POST["wait_mod"];
$announce = check_str($_POST["announce"]); $announce = $_POST["announce"];
$sounds = check_str($_POST["sounds"]); $sounds = $_POST["sounds"];
$mute = check_str($_POST["mute"]); $mute = $_POST["mute"];
$created = check_str($_POST["created"]); $created = $_POST["created"];
$created_by = check_str($_POST["created_by"]); $created_by = $_POST["created_by"];
$enabled = check_str($_POST["enabled"]); $enabled = $_POST["enabled"];
$description = check_str($_POST["description"]); $description = $_POST["description"];
//remove any pin number formatting //remove any pin number formatting
$moderator_pin = preg_replace('{\D}', '', $moderator_pin); $moderator_pin = preg_replace('{\D}', '', $moderator_pin);
@ -81,47 +81,47 @@
//get the conference centers array and set a default conference center //get the conference centers array and set a default conference center
$sql = "select * from v_conference_centers "; $sql = "select * from v_conference_centers ";
$sql .= "where domain_uuid = '$domain_uuid' "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "order by conference_center_name asc "; $sql .= "order by conference_center_name asc ";
$prep_statement = $db->prepare(check_sql($sql)); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$prep_statement->execute(); $database = new database;
$conference_centers = $prep_statement->fetchAll(PDO::FETCH_ASSOC); $conference_centers = $database->select($sql, $parameters, 'all');
if (strlen($conference_center_uuid) == 0) { if (!is_uuid($conference_center_uuid)) {
$conference_center_uuid = $conference_centers[0]["conference_center_uuid"]; $conference_center_uuid = $conference_centers[0]["conference_center_uuid"];
} }
unset($sql, $parameters);
//get the conference profiles //get the conference profiles
$sql = "select * "; $sql = "select * ";
$sql .= "from v_conference_profiles "; $sql .= "from v_conference_profiles ";
$sql .= "where profile_enabled = 'true' "; $sql .= "where profile_enabled = 'true' ";
$sql .= "and profile_name <> 'sla' "; $sql .= "and profile_name <> 'sla' ";
$prep_statement = $db->prepare(check_sql($sql)); $database = new database;
$prep_statement->execute(); $conference_profiles = $database->select($sql, null, 'all');
$conference_profiles = $prep_statement->fetchAll(PDO::FETCH_NAMED); unset ($sql);
unset ($prep_statement, $sql);
//set the default //set the default
if ($profile === "") { $profile = "default"; } if ($profile === "") { $profile = "default"; }
//define fucntion get_meeting_pin - used to find a unique pin number //define fucntion get_meeting_pin - used to find a unique pin number
function get_meeting_pin($length, $meeting_uuid) { function get_meeting_pin($length, $meeting_uuid) {
global $db;
$pin = generate_password($length,1); $pin = generate_password($length,1);
$sql = "select count(*) as num_rows from v_meetings "; $sql = "select count(*) from v_meetings ";
$sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "where domain_uuid = :domain_uuid ";
//$sql .= "and meeting_uuid <> '".$meeting_uuid."' "; //$sql .= "and meeting_uuid <> :meeting_uuid ";
$sql .= "and (moderator_pin = '".$pin."' or participant_pin = '".$pin."') "; $sql .= "and (moderator_pin = :pin or participant_pin = :pin) ";
$prep_statement = $db->prepare(check_sql($sql)); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
if ($prep_statement) { //$parameters['meeting_uuid'] = $meeting_uuid;
$prep_statement->execute(); $parameters['pin'] = $pin;
$row = $prep_statement->fetch(PDO::FETCH_ASSOC); $database = new database;
if ($row['num_rows'] == 0) { $num_rows = $database->select($sql, $parameters, 'column');
return $pin; if ($num_rows == 0) {
} return $pin;
else {
get_meeting_pin($length, $uuid);
}
} }
else {
get_meeting_pin($length, $uuid);
}
unset($sql, $parameters);
} }
//record announcment //record announcment
@ -139,17 +139,20 @@
} }
//generate the pins //generate the pins
$sql = "select conference_center_pin_length from v_conference_centers "; $sql = "select conference_center_pin_length ";
$sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "from v_conference_centers ";
if (strlen($conference_center_uuid) > 0) { $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and conference_center_uuid = '".$conference_center_uuid."' "; if (is_uuid($conference_center_uuid)) {
$sql .= "and conference_center_uuid = :conference_center_uuid ";
$parameters['conference_center_uuid'] = $conference_center_uuid;
} }
$prep_statement = $db->prepare(check_sql($sql)); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
if ($prep_statement) { $database = new database;
$prep_statement->execute(); $row = $database->select($sql, $parameters, 'row');
$row = $prep_statement->fetch(PDO::FETCH_ASSOC); if (is_array($row) && sizeof($row) != 0) {
$pin_length = $row['conference_center_pin_length']; $pin_length = $row['conference_center_pin_length'];
} }
unset($sql, $parameters);
if (strlen($moderator_pin) == 0) { if (strlen($moderator_pin) == 0) {
$moderator_pin = get_meeting_pin($pin_length, $meeting_uuid); $moderator_pin = get_meeting_pin($pin_length, $meeting_uuid);
} }
@ -161,14 +164,16 @@
if ($_GET["a"] == "delete" && permission_exists('conference_room_delete')) { if ($_GET["a"] == "delete" && permission_exists('conference_room_delete')) {
if (strlen($_REQUEST["meeting_user_uuid"]) > 0) { if (strlen($_REQUEST["meeting_user_uuid"]) > 0) {
//set the variables //set the variables
$meeting_user_uuid = check_str($_REQUEST["meeting_user_uuid"]); $meeting_user_uuid = $_REQUEST["meeting_user_uuid"];
$conference_room_uuid = check_str($_REQUEST["conference_room_uuid"]); $conference_room_uuid = $_REQUEST["conference_room_uuid"];
//delete the extension from the ring_group //delete the extension from the ring_group
$sql = "delete from v_meeting_users "; $array['meeting_users'][0]['meeting_user_uuid'] = $meeting_user_uuid;
$sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; $array['meeting_users'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "and meeting_user_uuid = '$meeting_user_uuid' "; $database = new database;
$db->exec(check_sql($sql)); $database->app_name = 'conference_centers';
unset($sql); $database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$database->delete($array);
unset($array);
} }
message::add($text['message-delete']); message::add($text['message-delete']);
@ -181,42 +186,49 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
$msg = ''; $msg = '';
if ($action == "update") { if ($action == "update") {
$conference_room_uuid = check_str($_POST["conference_room_uuid"]); $conference_room_uuid = $_POST["conference_room_uuid"];
} }
//check for a unique pin number and length //check for a unique pin number and length
if (strlen($moderator_pin) > 0 || strlen($participant_pin) > 0) { if (strlen($moderator_pin) > 0 || strlen($participant_pin) > 0) {
//make sure the moderator pin number is unique //make sure the moderator pin number is unique
$sql = "select count(*) as num_rows from v_meetings "; $sql = "select count(*) from v_meetings ";
$sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "where domain_uuid = :domain_uuid ";
if (strlen($meeting_uuid) > 0) { if (is_uuid($meeting_uuid)) {
$sql .= "and meeting_uuid <> '".$meeting_uuid."' "; $sql .= "and meeting_uuid <> :meeting_uuid ";
$parameters['meeting_uuid'] = $meeting_uuid;
} }
$sql .= "and (moderator_pin = '".$moderator_pin."' or participant_pin = '".$moderator_pin."') "; $sql .= "and (";
$prep_statement = $db->prepare(check_sql($sql)); $sql .= "moderator_pin = :moderator_pin ";
if ($prep_statement) { $sql .= "or participant_pin = :moderator_pin ";
$prep_statement->execute(); $sql .= ") ";
$row = $prep_statement->fetch(PDO::FETCH_ASSOC); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
if ($row['num_rows'] > 0) { $parameters['moderator_pin'] = $moderator_pin;
$msg .= $text['message-unique_moderator_pin']."<br />\n"; $database = new database;
} $num_rows = $database->select($sql, $parameters, 'column');
if ($num_rows > 0) {
$msg .= $text['message-unique_moderator_pin']."<br />\n";
} }
unset($sql, $parameters);
//make sure the participant pin number is unique //make sure the participant pin number is unique
$sql = "select count(*) as num_rows from v_meetings "; $sql = "select count(*) from v_meetings ";
$sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "where domain_uuid = :domain_uuid ";
if (strlen($meeting_uuid) > 0) { if (is_uuid($meeting_uuid)) {
$sql .= "and meeting_uuid <> '".$meeting_uuid."' "; $sql .= "and meeting_uuid <> :meeting_uuid ";
$parameters['meeting_uuid'] = $meeting_uuid;
} }
$sql .= "and (moderator_pin = '".$participant_pin."' or participant_pin = '".$participant_pin."') "; $sql .= "and (";
$prep_statement = $db->prepare(check_sql($sql)); $sql .= "moderator_pin = :participant_pin ";
if ($prep_statement) { $sql .= "or participant_pin = :participant_pin ";
$prep_statement->execute(); $sql .= ") ";
$row = $prep_statement->fetch(PDO::FETCH_ASSOC); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
if ($row['num_rows'] > 0) { $parameters['participant_pin'] = $participant_pin;
$msg .= $text['message-unique_participant_pin']."<br />\n"; $num_rows = $database->select($sql, $parameters, 'column');
} if ($num_rows > 0) {
$msg .= $text['message-unique_participant_pin']."<br />\n";
} }
unset($sql, $parameters);
//additional checks //additional checks
if ($moderator_pin == $participant_pin) { if ($moderator_pin == $participant_pin) {
@ -271,206 +283,193 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
//add a meeting //add a meeting
$meeting_uuid = uuid(); $meeting_uuid = uuid();
$sql = "insert into v_meetings "; $array['meetings'][0]['meeting_uuid'] = $meeting_uuid;
$sql .= "("; $array['meetings'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "domain_uuid, "; $array['meetings'][0]['moderator_pin'] = $moderator_pin;
$sql .= "meeting_uuid, "; $array['meetings'][0]['participant_pin'] = $participant_pin;
$sql .= "moderator_pin, "; $array['meetings'][0]['enabled'] = $enabled;
$sql .= "participant_pin, "; $array['meetings'][0]['description'] = $description;
$sql .= "enabled, ";
$sql .= "description "; $p = new permissions;
$sql .= ") "; $p->add('meeting_add', 'temp');
$sql .= "values ";
$sql .= "("; $database = new database;
$sql .= "'$domain_uuid', "; $database->app_name = 'conference_centers';
$sql .= "'$meeting_uuid', "; $database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$sql .= "'$moderator_pin', "; $database->save($array);
$sql .= "'$participant_pin', "; unset($array);
$sql .= "'$enabled', ";
$sql .= "'$description' "; $p->delete('meeting_add', 'temp');
$sql .= ")";
$db->exec(check_sql($sql));
unset($sql);
//add a conference room //add a conference room
$conference_room_uuid = uuid(); $conference_room_uuid = uuid();
$sql = "insert into v_conference_rooms "; $array['conference_rooms'][0]['conference_room_uuid'] = $conference_room_uuid;
$sql .= "("; $array['conference_rooms'][0]['conference_center_uuid'] = $conference_center_uuid;
$sql .= "domain_uuid, "; $array['conference_rooms'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "conference_room_uuid, "; $array['conference_rooms'][0]['meeting_uuid'] = $meeting_uuid;
$sql .= "conference_center_uuid, "; $array['conference_rooms'][0]['conference_room_name'] = $conference_room_name;
$sql .= "meeting_uuid, "; $array['conference_rooms'][0]['profile'] = $profile;
$sql .= "conference_room_name, "; $array['conference_rooms'][0]['record'] = $record;
$sql .= "profile, "; $array['conference_rooms'][0]['max_members'] = $max_members;
$sql .= "record, "; $array['conference_rooms'][0]['start_datetime'] = $start_datetime;
$sql .= "max_members, "; $array['conference_rooms'][0]['stop_datetime'] = $stop_datetime;
$sql .= "start_datetime, "; $array['conference_rooms'][0]['wait_mod'] = $wait_mod;
$sql .= "stop_datetime, "; $array['conference_rooms'][0]['announce'] = $announce;
$sql .= "wait_mod, "; $array['conference_rooms'][0]['sounds'] = $sounds;
$sql .= "announce, "; $array['conference_rooms'][0]['mute'] = $mute;
$sql .= "sounds, "; $array['conference_rooms'][0]['created'] = 'now()';
$sql .= "mute, "; $array['conference_rooms'][0]['created_by'] = $_SESSION['user_uuid'];
$sql .= "created, "; $array['conference_rooms'][0]['enabled'] = $enabled;
$sql .= "created_by, "; $array['conference_rooms'][0]['description'] = $description;
$sql .= "enabled, ";
$sql .= "description "; $database = new database;
$sql .= ") "; $database->app_name = 'conference_centers';
$sql .= "values "; $database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$sql .= "("; $database->save($array);
$sql .= "'$domain_uuid', "; unset($array);
$sql .= "'$conference_room_uuid', ";
$sql .= "'$conference_center_uuid', ";
$sql .= "'$meeting_uuid', ";
$sql .= "'$conference_room_name', ";
$sql .= "'$profile', ";
$sql .= "'$record', ";
$sql .= "'$max_members', ";
$sql .= "'$start_datetime', ";
$sql .= "'$stop_datetime', ";
$sql .= "'$wait_mod', ";
$sql .= "'$announce', ";
$sql .= "'$sounds', ";
$sql .= "'$mute', ";
$sql .= "now(), ";
$sql .= "'".$_SESSION['user_uuid']."', ";
$sql .= "'$enabled', ";
$sql .= "'$description' ";
$sql .= ")";
$db->exec(check_sql($sql));
unset($sql);
//assign the logged in user to the meeting //assign the logged in user to the meeting
if (strlen($_SESSION["user_uuid"]) > 0) { if (is_uuid($_SESSION["user_uuid"])) {
$meeting_user_uuid = uuid(); $meeting_user_uuid = uuid();
$sql = "insert into v_meeting_users "; $array['meeting_users'][0]['meeting_user_uuid'] = $meeting_user_uuid;
$sql .= "("; $array['meeting_users'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "domain_uuid, "; $array['meeting_users'][0]['meeting_uuid'] = $meeting_uuid;
$sql .= "meeting_user_uuid, "; $array['meeting_users'][0]['user_uuid'] = $_SESSION["user_uuid"];
$sql .= "meeting_uuid, ";
$sql .= "user_uuid "; $p = new permissions;
$sql .= ") "; $p->add('meeting_user_add', 'temp');
$sql .= "values ";
$sql .= "("; $database = new database;
$sql .= "'$domain_uuid', "; $database->app_name = 'conference_centers';
$sql .= "'$meeting_user_uuid', "; $database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$sql .= "'$meeting_uuid', "; $database->save($array);
$sql .= "'".$_SESSION["user_uuid"]."' "; unset($array);
$sql .= ")";
$db->exec(check_sql($sql)); $p->delete('meeting_user_add', 'temp');
unset($sql);
} }
message::add($text['message-add']); message::add($text['message-add']);
} //if ($action == "add") }
if ($action == "update" && permission_exists('conference_room_edit')) { if ($action == "update" && permission_exists('conference_room_edit')) {
//get the meeting_uuid //get the meeting_uuid
if (count($_GET) > 0 && $_POST["persistformvar"] != "true") { if (count($_GET) > 0 && $_POST["persistformvar"] != "true") {
$conference_room_uuid = check_str($_GET["id"]); $conference_room_uuid = $_GET["id"];
$sql = "select * from v_conference_rooms "; $sql = "select * from v_conference_rooms ";
$sql .= "where domain_uuid = '$domain_uuid' "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and conference_room_uuid = '$conference_room_uuid' "; $sql .= "and conference_room_uuid = :conference_room_uuid ";
$prep_statement = $db->prepare(check_sql($sql)); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$prep_statement->execute(); $parameters['conference_room_uuid'] = $conference_room_uuid;
$result = $prep_statement->fetchAll(); $database = new database;
foreach ($result as &$row) { $row = $database->select($sql, $parameters, 'row');
if (is_array($row) && sizeof($row) != 0) {
$meeting_uuid = $row["meeting_uuid"]; $meeting_uuid = $row["meeting_uuid"];
} }
unset ($prep_statement); unset($sql, $parameters, $row);
} }
//update conference meetings //update conference meetings
$sql = "update v_meetings set "; $array['meetings'][0]['meeting_uuid'] = $meeting_uuid;
$sql .= "moderator_pin = '$moderator_pin', "; $array['meetings'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "participant_pin = '$participant_pin', "; $array['meetings'][0]['moderator_pin'] = $moderator_pin;
$sql .= "enabled = '$enabled', "; $array['meetings'][0]['participant_pin'] = $participant_pin;
$sql .= "description = '$description' "; $array['meetings'][0]['enabled'] = $enabled;
$sql .= "where domain_uuid = '$domain_uuid' "; $array['meetings'][0]['description'] = $description;
$sql .= "and meeting_uuid = '$meeting_uuid' ";
$db->exec(check_sql($sql)); $p = new permissions;
unset($sql); $p->add('meeting_edit', 'temp');
$database = new database;
$database->app_name = 'conference_centers';
$database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$database->save($array);
unset($array);
$p->delete('meeting_edit', 'temp');
//update the conference room //update the conference room
$sql = "update v_conference_rooms set "; $array['conference_rooms'][0]['conference_room_uuid'] = $conference_room_uuid;
$sql .= "conference_center_uuid = '$conference_center_uuid', "; $array['conference_rooms'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
//$sql .= "meeting_uuid = '$meeting_uuid', "; $array['conference_rooms'][0]['conference_center_uuid'] = $conference_center_uuid;
$sql .= "conference_room_name = '$conference_room_name', "; $array['conference_rooms'][0]['conference_room_name'] = $conference_room_name;
if (strlen($profile) > 0) { if (strlen($profile) > 0) {
$sql .= "profile = '$profile', "; $array['conference_rooms'][0]['profile'] = $profile;
} }
if (strlen($record) > 0) { if (strlen($record) > 0) {
$sql .= "record = '$record', "; $array['conference_rooms'][0]['record'] = $record;
} }
if (strlen($max_members) > 0) { if (strlen($max_members) > 0) {
$sql .= "max_members = '$max_members', "; $array['conference_rooms'][0]['max_members'] = $max_members;
} }
$sql .= "start_datetime = '".$start_datetime."', "; $array['conference_rooms'][0]['start_datetime'] = $start_datetime;
$sql .= "stop_datetime = '".$stop_datetime."', "; $array['conference_rooms'][0]['stop_datetime'] = $stop_datetime;
if (strlen($wait_mod) > 0) { if (strlen($wait_mod) > 0) {
$sql .= "wait_mod = '$wait_mod', "; $array['conference_rooms'][0]['wait_mod'] = $wait_mod;
} }
if (strlen($announce) > 0) { if (strlen($announce) > 0) {
$sql .= "announce = '$announce', "; $array['conference_rooms'][0]['announce'] = $announce;
} }
//$sql .= "enter_sound = '$enter_sound', ";
if (strlen($mute) > 0) { if (strlen($mute) > 0) {
$sql .= "mute = '$mute', "; $array['conference_rooms'][0]['mute'] = $mute;
} }
$sql .= "sounds = '$sounds', "; $array['conference_rooms'][0]['sounds'] = $sounds;
if (strlen($enabled) > 0) { if (strlen($enabled) > 0) {
$sql .= "enabled = '$enabled', "; $array['conference_rooms'][0]['enabled'] = $enabled;
} }
$sql .= "description = '$description' "; $array['conference_rooms'][0]['description'] = $description;
$sql .= "where domain_uuid = '$domain_uuid' ";
$sql .= "and conference_room_uuid = '$conference_room_uuid' ";
$db->exec(check_sql($sql));
unset($sql);
message::add($text['message-update']); $database = new database;
} //if ($action == "update") $database->app_name = 'conference_centers';
$database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$database->save($array);
unset($array);
//set message
message::add($text['message-update']);
}
//assign the user to the meeting //assign the user to the meeting
if (strlen($user_uuid) > 0 && $_SESSION["user_uuid"] != $user_uuid) { if (is_uuid($user_uuid) && $_SESSION["user_uuid"] != $user_uuid) {
$meeting_user_uuid = uuid(); $meeting_user_uuid = uuid();
$sql = "insert into v_meeting_users "; $array['meeting_users'][0]['meeting_user_uuid'] = $meeting_user_uuid;
$sql .= "("; $array['meeting_users'][0]['domain_uuid'] = $_SESSION['domain_uuid'];
$sql .= "domain_uuid, "; $array['meeting_users'][0]['meeting_uuid'] = $meeting_uuid;
$sql .= "meeting_user_uuid, "; $array['meeting_users'][0]['user_uuid'] = $user_uuid;
$sql .= "meeting_uuid, ";
$sql .= "user_uuid "; $p = new permissions;
$sql .= ")"; $p->add('meeting_user_add', 'temp');
$sql .= "values ";
$sql .= "("; $database = new database;
$sql .= "'$domain_uuid', "; $database->app_name = 'conference_centers';
$sql .= "'$meeting_user_uuid', "; $database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$sql .= "'$meeting_uuid', "; $database->save($array);
$sql .= "'$user_uuid' "; unset($array);
$sql .= ")";
//echo $sql; //exit; $p->delete('meeting_user_add', 'temp');
$db->exec(check_sql($sql));
unset($sql);
message::add($text['message-add']); message::add($text['message-add']);
} }
header("Location: conference_room_edit.php?id=".escape($conference_room_uuid)); //redirect
return; header("Location: conference_room_edit.php?id=".escape($conference_room_uuid));
exit;
} //if ($_POST["persistformvar"] != "true") }
} //(count($_POST)>0 && strlen($_POST["persistformvar"]) == 0) }
//pre-populate the form //pre-populate the form
if (count($_GET) > 0 && $_POST["persistformvar"] != "true") { if (count($_GET) > 0 && $_POST["persistformvar"] != "true") {
//get the conference room details //get the conference room details
$conference_room_uuid = check_str($_REQUEST["id"]); $conference_room_uuid = $_REQUEST["id"];
$sql = "select * from v_conference_rooms as r, v_meetings as m "; $sql = "select * from v_conference_rooms as r, v_meetings as m ";
$sql .= "where r.domain_uuid = '$domain_uuid' "; $sql .= "where r.domain_uuid = :domain_uuid ";
$sql .= "and r.meeting_uuid = m.meeting_uuid "; $sql .= "and r.meeting_uuid = m.meeting_uuid ";
$sql .= "and r.conference_room_uuid = '$conference_room_uuid' "; $sql .= "and r.conference_room_uuid = :conference_room_uuid ";
$prep_statement = $db->prepare(check_sql($sql)); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$prep_statement->execute(); $parameters['conference_room_uuid'] = $conference_room_uuid;
$result = $prep_statement->fetchAll(); $database = new database;
foreach ($result as &$row) { $row = $database->select($sql, $parameters, 'row');
if (is_array($row) && sizeof($row) != 0) {
$conference_center_uuid = $row["conference_center_uuid"]; $conference_center_uuid = $row["conference_center_uuid"];
$meeting_uuid = $row["meeting_uuid"]; $meeting_uuid = $row["meeting_uuid"];
$moderator_pin = $row["moderator_pin"]; $moderator_pin = $row["moderator_pin"];
@ -490,28 +489,29 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
$enabled = $row["enabled"]; $enabled = $row["enabled"];
$description = $row["description"]; $description = $row["description"];
} }
unset ($prep_statement, $sql); unset($sql, $parameters, $row);
} }
//get the users array //get the users array
$sql = "SELECT * FROM v_users "; $sql = "select * from v_users ";
$sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "order by username asc "; $sql .= "order by username asc ";
$prep_statement = $db->prepare(check_sql($sql)); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$prep_statement->execute(); $database = new database;
$users = $prep_statement->fetchAll(PDO::FETCH_NAMED); $users = $database->select($sql, $parameters, 'all');
unset($prep_statement, $sql); unset($sql, $parameters);
//get the users assigned to this meeting //get the users assigned to this meeting
$sql = "SELECT * FROM v_users as u, v_meeting_users as m "; $sql = "select * from v_users as u, v_meeting_users as m ";
$sql .= "where u.user_uuid = m.user_uuid "; $sql .= "where u.user_uuid = m.user_uuid ";
$sql .= "and m.domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "and m.domain_uuid = :domain_uuid ";
$sql .= "and m.meeting_uuid = '$meeting_uuid' "; $sql .= "and m.meeting_uuid = :meeting_uuid ";
$sql .= "order by u.username asc "; $sql .= "order by u.username asc ";
$prep_statement = $db->prepare(check_sql($sql)); $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$prep_statement->execute(); $parameters['meeting_uuid'] = $meeting_uuid;
$meeting_users = $prep_statement->fetchAll(PDO::FETCH_NAMED); $database = new database;
unset($prep_statement, $sql); $meeting_users = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//set default profile //set default profile
if (strlen($profile) == 0) { $profile = 'default'; } if (strlen($profile) == 0) { $profile = 'default'; }

16
app/conference_centers/conference_rooms.php
View File

@ -47,16 +47,17 @@
require_once "resources/paging.php"; require_once "resources/paging.php";
//get the meeting_uuid using the pin number //get the meeting_uuid using the pin number
$search = $_GET["search"]; $search = preg_replace('{\D}', '', $_GET["search"]);
$search = preg_replace('{\D}', '', $search);
if (strlen($search) > 0) { if (strlen($search) > 0) {
$sql = "select meeting_uuid from v_meetings "; $sql = "select meeting_uuid ";
$sql .= "from v_meetings ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and (moderator_pin = :search or participant_pin = :search) "; $sql .= "and ( ";
$sql .= "moderator_pin = :search ";
$sql .= "or participant_pin = :search ";
$sql .= ") ";
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
if (strlen($search) > 0) { $parameters['search'] = '%'.$search.'%';
$parameters['search'] = '%'.$search.'%';
}
$database = new database; $database = new database;
$meeting_uuid = $database->select($sql, $parameters, 'column'); $meeting_uuid = $database->select($sql, $parameters, 'column');
} }
@ -114,6 +115,7 @@
$database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e'; $database->app_uuid = '8d083f5a-f726-42a8-9ffa-8d28f848f10e';
$database->save($array); $database->save($array);
$message = $database->message; $message = $database->message;
unset($array);
} }
//get conference array //get conference array

48
app/conference_centers/conference_session_details.php
View File

@ -46,27 +46,12 @@
require_once "resources/paging.php"; require_once "resources/paging.php";
//set variables from the http values //set variables from the http values
$order_by = $_GET["order_by"]; $order_by = $_GET["order_by"] != '' ? $_GET["order_by"] : 'start_epoch';
$order = $_GET['order']; $order = $_GET['order'] != '' ? $_GET['order'] : 'asc';
$conference_session_uuid = $_GET["uuid"]; $conference_session_uuid = $_GET["uuid"];
//validate order by
if (strlen($order_by) > 0) {
$order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', $order_by);
}
//validate the order
switch ($order) {
case 'asc':
break;
case 'desc':
break;
default:
$order = '';
}
//add meeting_uuid to a session variable //add meeting_uuid to a session variable
if (strlen($conference_session_uuid) > 0 && is_uuid($conference_session_uuid)) { if (is_uuid($conference_session_uuid)) {
$_SESSION['meeting']['session_uuid'] = $conference_session_uuid; $_SESSION['meeting']['session_uuid'] = $conference_session_uuid;
} }
@ -77,15 +62,15 @@
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['conference_session_uuid'] = $_SESSION['meeting']['session_uuid']; $parameters['conference_session_uuid'] = $_SESSION['meeting']['session_uuid'];
$database = new database; $database = new database;
$conference_sessions = $database->select($sql, $parameters, 'all'); $row = $database->select($sql, $parameters, 'row');
foreach ($conference_sessions as $row) { if (is_array($row) && sizeof($row) != 0) {
$meeting_uuid = $row["meeting_uuid"]; $meeting_uuid = $row["meeting_uuid"];
$recording = $row["recording"]; $recording = $row["recording"];
$start_epoch = $row["start_epoch"]; $start_epoch = $row["start_epoch"];
$end_epoch = $row["end_epoch"]; $end_epoch = $row["end_epoch"];
$profile = $row["profile"]; $profile = $row["profile"];
} }
unset ($conference_sessions, $parameters); unset($sql, $parameters, $row);
//set the year, month and day based on the session start epoch //set the year, month and day based on the session start epoch
$tmp_year = date("Y", $start_epoch); $tmp_year = date("Y", $start_epoch);
@ -131,13 +116,13 @@
echo "</table>\n"; echo "</table>\n";
//prepare to page the results //prepare to page the results
$sql = "select count(*) as num_rows from v_conference_session_details "; $sql = "select count(*) from v_conference_session_details ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and conference_session_uuid = :conference_session_uuid "; $sql .= "and conference_session_uuid = :conference_session_uuid ";
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['conference_session_uuid'] = $_SESSION['meeting']['session_uuid']; $parameters['conference_session_uuid'] = $_SESSION['meeting']['session_uuid'];
$num_rows = $database->select($sql, $parameters, 'column'); $num_rows = $database->select($sql, $parameters, 'column');
unset($parameters); unset($sql, $parameters);
//prepare to page the results //prepare to page the results
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50; $rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
@ -151,19 +136,12 @@
$sql = "select * from v_conference_session_details "; $sql = "select * from v_conference_session_details ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and conference_session_uuid = :conference_session_uuid "; $sql .= "and conference_session_uuid = :conference_session_uuid ";
if (strlen($order_by) == 0) { $sql .= order_by($order_by, $order);
$sql .= "order by start_epoch asc "; $sql .= limit_offset($rows_per_page, $offset);
}
else {
$sql .= "order by $order_by $order ";
}
$sql .= "limit :rows_per_page offset :offset ";
$parameters['domain_uuid'] = $_SESSION['domain_uuid']; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['conference_session_uuid'] = $_SESSION['meeting']['session_uuid']; $parameters['conference_session_uuid'] = $_SESSION['meeting']['session_uuid'];
$parameters['rows_per_page'] = $rows_per_page;
$parameters['offset'] = $offset;
$conference_session_details = $database->select($sql, $parameters, 'all'); $conference_session_details = $database->select($sql, $parameters, 'all');
unset ($parameters); unset($sql, $parameters);
//show the styles //show the styles
$c = 0; $c = 0;
@ -189,7 +167,7 @@
} }
echo "</tr>\n"; echo "</tr>\n";
if (is_array($conference_session_details)) { if (is_array($conference_session_details) && sizeof($conference_session_details) != 0) {
foreach($conference_session_details as $row) { foreach($conference_session_details as $row) {
if (defined('TIME_24HR') && TIME_24HR == 1) { if (defined('TIME_24HR') && TIME_24HR == 1) {
$start_date = date("j M Y H:i:s", $row['start_epoch']); $start_date = date("j M Y H:i:s", $row['start_epoch']);
@ -222,7 +200,7 @@
echo "</tr>\n"; echo "</tr>\n";
if ($c==0) { $c=1; } else { $c=0; } if ($c==0) { $c=1; } else { $c=0; }
} //end foreach } //end foreach
unset($sql, $conference_session_details); unset($conference_session_details);
} //end if results } //end if results
echo "<tr>\n"; echo "<tr>\n";

42
app/conference_centers/conference_sessions.php
View File

@ -47,26 +47,11 @@
//set variables from the http values //set variables from the http values
$meeting_uuid = $_GET["id"]; $meeting_uuid = $_GET["id"];
$order_by = $_GET["order_by"]; $order_by = $_GET["order_by"] != '' ? $_GET["order_by"] : 'start_epoch';
$order = $_GET["order"]; $order = $_GET["order"] != '' ? $_GET["order"] : 'desc';
//validate order by
if (strlen($order_by) > 0) {
$order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', $order_by);
}
//validate the order
switch ($order) {
case 'asc':
break;
case 'desc':
break;
default:
$order = '';
}
//add meeting_uuid to a session variable //add meeting_uuid to a session variable
if (strlen($meeting_uuid) > 0 && is_uuid($meeting_uuid)) { if (is_uuid($meeting_uuid)) {
$_SESSION['meeting']['uuid'] = $meeting_uuid; $_SESSION['meeting']['uuid'] = $meeting_uuid;
} }
@ -84,13 +69,14 @@
echo "</table>\n"; echo "</table>\n";
//prepare to page the results //prepare to page the results
$sql = "select count(*) as num_rows from v_conference_sessions "; $sql = "select count(*) from v_conference_sessions ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and meeting_uuid = :meeting_uuid "; $sql .= "and meeting_uuid = :meeting_uuid ";
$parameters['domain_uuid'] = $domain_uuid; $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
$parameters['meeting_uuid'] = $_SESSION['meeting']['uuid']; $parameters['meeting_uuid'] = $_SESSION['meeting']['uuid'];
$database = new database; $database = new database;
$num_rows = $database->select($sql, $parameters, 'column'); $num_rows = $database->select($sql, $parameters, 'column');
unset($sql, $parameters);
//prepare to page the results //prepare to page the results
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50; $rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
@ -104,17 +90,13 @@
$sql = "select * from v_conference_sessions "; $sql = "select * from v_conference_sessions ";
$sql .= "where domain_uuid = :domain_uuid "; $sql .= "where domain_uuid = :domain_uuid ";
$sql .= "and meeting_uuid = :meeting_uuid "; $sql .= "and meeting_uuid = :meeting_uuid ";
if (strlen($order_by) == 0) { $sql .= order_by($order_by, $order);
$sql .= "order by start_epoch desc "; $sql .= limit_offset($rows_per_page, $offset);
} $parameters['domain_uuid'] = $_SESSION['domain_uuid'];
else { $parameters['meeting_uuid'] = $_SESSION['meeting']['uuid'];
$sql .= "order by $order_by $order ";
}
$sql .= "limit :rows_per_page offset :offset ";
$parameters['rows_per_page'] = $rows_per_page;
$parameters['offset'] = $offset;
$database = new database; $database = new database;
$conference_sessions = $database->select($sql, $parameters, 'all'); $conference_sessions = $database->select($sql, $parameters, 'all');
unset($sql, $parameters);
//set the row style //set the row style
$c = 0; $c = 0;
@ -147,7 +129,7 @@
echo "<td class='list_control_icon'>&nbsp;</td>\n"; echo "<td class='list_control_icon'>&nbsp;</td>\n";
echo "</tr>\n"; echo "</tr>\n";
if (is_array($conference_sessions)) { if (is_array($conference_sessions) && sizeof($conference_sessions) != 0) {
foreach($conference_sessions as $row) { foreach($conference_sessions as $row) {
$tmp_year = date("Y", $row['start_epoch']); $tmp_year = date("Y", $row['start_epoch']);
$tmp_month = date("M", $row['start_epoch']); $tmp_month = date("M", $row['start_epoch']);